https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:44:55.121698+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-366070 EUVD-2026-366070 2026-10-03T12:44:55.274635+00:00 EUVD-2026-366070 https://cve.radiocsirt.org/vuln/fkie_cve-2026-46579 fkie_cve-2026-46579 2026-10-03T12:44:55.274695+00:00

A flaw was found in the OpenShift Router. When a Route has `insecureEdgeTerminationPolicy` set to Allow, the HTTP frontend does not remove `X-SSL-Client-*` headers from incoming requests. This allows an unauthenticated attacker to send plain HTTP requests with crafted `X-SSL-Client-*` headers. As a result, backends relying on these headers for mutual TLS (Transport Layer Security) authentication can be bypassed, enabling the attacker to impersonate client certificate identities.

 https://cve.radiocsirt.org/vuln/ghsa-ccmj-8c3p-4qwj GHSA-ccmj-8c3p-4qwj 2026-10-03T12:44:55.274746+00:00

A flaw was found in the OpenShift Router. When a Route has `insecureEdgeTerminationPolicy` set to Allow, the HTTP frontend does not remove `X-SSL-Client-*` headers from incoming requests. This allows an unauthenticated attacker to send plain HTTP requests with crafted `X-SSL-Client-*` headers. As a result, backends relying on these headers for mutual TLS (Transport Layer Security) authentication can be bypassed, enabling the attacker to impersonate client certificate identities.

 https://cve.radiocsirt.org/vuln/rhsa-2026:27009 RHSA-2026:27009 — Red Hat Security Advisory: OpenShift Container Platform 4.22.2 bug fix and security update 2026-10-03T12:44:55.274772+00:00

openshift/router: openshift/router: mTLS client certificate spoofing via unstripped X-SSL-Client headers on HTTP frontend

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2040 WID-SEC-W-2026-2040 — Red Hat OpenShift Container Platform (Router): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T12:44:55.274814+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat OpenShift Container Platform ausnutzen, um Sicherheitsvorkehrungen zu umgehen.